[fltk/fltk] Question about using Fl_JPEG_Image() without size argument (Issue #1601)

FLTK Library Forums Links Apps Login

[ All Forums | Back to fltk.issues ]

[ Previous Message ]

[ New Message | Reply ]

[ Next Message ]

[fltk/fltk] Question about using Fl_JPEG_Image() without size argument (Issue #1601) darealshinji 04:37 Sep 05

darealshinji created an issue (fltk/fltk#1601)

I've mentioned it briefly on my previous issue report about Fl_PNG_Image.
There's a function jpeg_unprotected_mem_src in Fl_JPEG_Image.cxx that allows loading JPEG from memory without a known file size:
https://github.com/fltk/fltk/blob/a3a499625da973f33feaa3c8600f950e57abcc60/src/Fl_JPEG_Image.cxx#L192

Is this a potential security risk?

—
Reply to this email directly, view it on GitHub, or unsubscribe.
Triage notifications, keep track of coding agent tasks and review pull requests on the go with GitHub Mobile for iOS and Android. Download it today!
You are receiving this because you are subscribed to this thread.

[ Direct Link to Message ]

[ Previous Message ]

[ New Message | Reply ]

[ Next Message ]